Passage @ HackTheBox

Obscurity is a 30-point Linux machine on HackTheBox that involves exploiting a command injection in a custom webserver, breaking... read more

Bankrobber is a 50-point machine on hackthebox that involves exploiting a cross site scripting vulnerability to gain access to... read more

We are solving Proper, a 40-point Windows machine on HackTheBox created by jkr and me. This box involves a... read more

Heist is an "easy" machine on hackthebox, involving some enumeration (especially rpc) and some forensics (dumping firefox memory). read more

Control is a 40-point windows machine on hackthebox that involves a sql injection which we use to upload a... read more

We are going to solve Atom, a 30-point machine on HackTheBox where we'll analyze an electron app and exploit... read more

We are going to solve Delivery, a 20-point machine on HackTheBox. For user, we will bypass email verification on... read more

We are solving Tenet, a 30-point machine HackTheBox that involves a simple PHP deserialization vulnerability, password reuse and a... read more

In this short writeup I will show how I completed Access on hackthebox.eu, a quite easy windows box that... read more

We are solving Previse, an easy linux machine on HackTheBox that involves a Command Injection & Path Hijacking. read more